Blue Ribbon Toll Free: (800) 892-7095

GeoTrust SSL Certificates

at Wholesale Prices in about 10 Minutes*

Customer Login
Home > Support > Installation > Apache

Install SSL Certificate: Apache Web Server

Follow these instructions to install your GeoTrust SSL certificate for your Web site.

Your SSL server certificate will be sent to you by email. The email message includes the web server certificate that you purchased in the body of the email message. Copy the certificate from the body of the email and paste it into a simple text editor, such as Notepad.

Copy Certificate to Notepad

Note: The examples below use the following naming conventions: "Your Private Key" = "domainname.key"; "Your Web Server Certificate" = "domainname.crt".

  1. Save the server certificate to the Apache server directory in which you plan to store your certificates.

    Tip: the default directory will be /etc/httpd/conf/ssl.crt/ if you installed Apache using the RPM or /usr/local/apache/conf/ssl.crt/ directory if you installed Apache using the source files. Please note that ssl.crt is a directory, not a file.

  2. Open the Apache httpd.conf file in a text editor.
  3. Locate the SSL VirtualHost container associated with your certificate. Verify that you have the following two directives within this virtual host. Please add them if they are not present:

    If your path is /etc/httpd/conf/...

    SSLCertificateFile /etc/httpd/conf/ssl.crt/domainname.crt (or server.crt)
    SSLCertificateKeyFile /etc/httpd/conf/ssl.key/domainname.key (or server.key)

    Or, if your path is /usr/local/apache/conf/...

    SSLCertificateFile /usr/local/apache/conf/ssl.crt/domainname.crt (or server.crt)
    SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/domainname.key (or server.key)
  4. Save the changes and exit the editor.
  5. Start or Restart your apache web server using one of the following commands:
    By default:

    /usr/local/apache/bin/apachectl startssl
    or
    /usr/local/apache/bin/apachectl restart

    Other commands:
    /usr/sbin/httpd startssl or restart
    /usr/sbin/httpd startssl or restart

Test your SSL certificate by using a browser to connect to your server. Use the https protocol directive. For example, if your SSL was issued to secure.mysite.com, enter https://secure.mysite.com into your browser.

The gold padlock icon Gold Padlock Indicates Secure Browser Mode on your browser will be displayed in the locked position if your certificate is installed correctly and the server is properly configured for SSL.